// By year
Best cybersecurity books from 2017
9 cybersecurity books published in 2017, ranked by rating. Each entry is an opinionated review with who the book is for.
01 · 2017
American Kingpin
The Epic Hunt for the Criminal Mastermind Behind the Silk Road
A propulsive account of how Ross Ulbricht built the Silk Road dark-web drug empire as Dread Pirate Roberts, and how a handful of investigators across rival agencies finally unmasked him.
Beginner5/5Nick Bilton02 · 2017
Attacking Network Protocols
A Hacker's Guide to Capture, Analysis, and Exploitation
James Forshaw, Project Zero veteran, on how to capture, parse, and break protocols from the wire up to the application layer, with a strong focus on building reusable analysis tooling.
Advanced5/5James Forshaw03 · 2017
Windows Internals, Part 1
System architecture, processes, threads, memory management, and more
The canonical Microsoft Press reference on Windows internals: how processes, threads, memory and system services are actually implemented in the modern Windows kernel. User-mode focus in this volume.
Advanced5/5Pavel Yosifovich, Alex Ionescu, Mark Russinovich, David Solomon04 · 2017
La face cachée d'internet
Hackers, dark net, Tor, Anonymous, WikiLeaks, Bitcoin
A lively, expert tour of the Internet's hidden layers — hackers, the dark web, Tor, Anonymous, WikiLeaks, Bitcoin — that demystifies the jargon without dumbing it down.
Beginner4/5Rayna Stamboliyska05 · 2017
Network Security Through Data Analysis
From Data to Action
Michael Collins on building situational awareness from network telemetry: collection architecture, statistical baseline-setting, and the analytic patterns that turn raw flows into detection.
Intermediate4/5Michael Collins06 · 2017
Practical Packet Analysis
Using Wireshark to Solve Real-World Network Problems
Chris Sanders' working manual for Wireshark, geared at troubleshooting and incident response rather than abstract protocol theory. Updated for Wireshark 2.x.
Beginner4/5Chris Sanders07 · 2017
Zero Trust Networks
Building Secure Systems in Untrusted Networks
Evan Gilman and Doug Barth's pre-marketing-bubble treatment of zero-trust architecture — what it is when you actually implement it (trust evaluation, device identity, dynamic policy) versus what the vendor pitch turned it into.
Intermediate4/5Evan Gilman, Doug Barth08 · 2017
Advanced Penetration Testing
Hacking the World's Most Secure Networks
A red-teamer's tour of getting into high-security targets without Metasploit, leaning on custom C2, social engineering, and tradecraft. Strong ideas, uneven execution.
Advanced3/5Wil Allsopp09 · 2017
The Art of Invisibility
The World's Most Famous Hacker Teaches You How to Be Safe in the Age of Big Brother and Big Data
Mitnick's accessible tour of personal privacy and anonymity, from passwords and Wi-Fi to layered operational tradecraft, told through anecdotes and step-by-step advice.
Beginner3/5Kevin Mitnick, Robert Vamosi